Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier: JGotNDnTa2F99eNuuEffC7CpgTbmsQJFXSY4uBE9D/A=
Subject key identifier: 38:15:9D:5E:D5:2A:BB:63:35:6F:E9:14:49:F7:D8:3F:77:7D:BD:B0
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 01A08B6867F4A7D2A69B0EFFAED7FA900013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number: 0238
Signing time: Thu 10 Sep 2026 13:01:10 +0000
Manifest this update: Thu 10 Sep 2026 13:01:10 +0000
Manifest next update: Fri 11 Sep 2026 13:01:10 +0000
Files and hashes: 1: V6kppHtIo247BBTH3uKp26adRoU.roa (hash: r9eyxABr1xQBoWx1fQ1XYssusw5T9eBOHoVdb80YKAw=)
2: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: zPvZMkLEhYrQIMdXTzs9Y5P5AvojXOgaWJ8OLqjNC7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:67:f4:a7:d2:a6:9b:0e:ff:ae:d7:fa:90:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Sep 10 13:01:10 2026 GMT
Not After : Sep 11 13:01:10 2026 GMT
Subject: CN=38159d5ed52abb63356fe91449f7d83f777dbdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:75:81:73:a1:53:11:81:56:fc:ba:3a:9c:
00:f3:4a:60:67:40:05:be:52:6f:6d:8d:bf:a3:e4:
d6:c1:53:e9:6f:ac:b8:38:f0:38:3b:33:a9:b4:70:
ca:b6:a9:f1:bf:b3:4a:a4:2b:5f:dc:0d:89:35:31:
1b:09:0b:04:34:f6:c4:10:5e:9b:b5:7a:0f:12:d8:
21:30:95:78:8d:08:c2:b5:b1:89:b4:9e:18:80:c0:
69:0a:3f:f7:0c:c8:c2:97:34:4a:1e:b8:73:8d:9a:
2d:0f:2c:ad:7c:91:fc:76:96:e2:ac:0b:fb:02:33:
db:0b:08:85:3e:bf:f0:17:70:63:76:0d:0d:1f:82:
b9:09:94:f1:39:96:fa:6c:f1:e2:0c:93:60:cc:5d:
45:24:16:d2:d0:41:54:75:60:33:61:4c:e6:83:61:
92:86:81:70:2b:09:85:61:b7:ab:2f:38:69:74:01:
cb:a7:6e:3a:cc:2f:4d:8a:b5:df:47:d2:7f:54:dc:
68:59:33:3e:99:4b:ca:51:ef:4c:5b:2e:c3:a5:50:
18:8d:3c:ae:66:4d:a5:d1:e2:7e:35:67:c8:cc:2a:
6b:62:90:3c:37:33:0f:33:fe:34:c8:62:cb:75:d8:
42:11:56:3d:47:09:e4:00:6f:21:4a:bb:a6:19:0b:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:9D:5E:D5:2A:BB:63:35:6F:E9:14:49:F7:D8:3F:77:7D:BD:B0
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0a:a2:07:b6:f3:b8:6b:5d:4b:36:87:54:59:dd:68:7a:3d:
25:8f:5b:2a:5d:9d:81:e4:f9:78:95:8e:d0:6d:61:c1:be:d0:
bd:e0:4b:94:a8:f9:7f:08:de:2e:01:e5:38:ef:94:27:27:e9:
34:09:b9:5a:11:24:76:c3:6b:ff:25:92:c9:17:88:2b:76:88:
bf:5c:5b:7e:d0:af:36:8f:14:40:e2:b0:6b:a8:bd:d0:b6:38:
0d:d0:26:7a:87:77:7c:47:8f:88:ad:0b:02:32:50:43:9e:26:
83:28:f5:4a:0b:0e:1e:79:5a:aa:af:68:45:cc:e0:05:f5:17:
df:51:93:89:56:c4:15:36:0b:f5:9d:c8:45:b3:3c:4e:55:d8:
29:80:2d:30:34:8d:f1:61:3d:01:d7:fc:b4:ff:dc:5d:00:cc:
6b:7c:40:d3:38:1c:80:ac:ce:28:9a:0f:79:28:8d:20:d2:ac:
30:7c:43:52:aa:fc:82:88:52:43:a6:54:bf:3b:e0:3e:ce:34:
f5:38:09:f9:7c:82:5a:fa:16:c0:46:6d:85:73:6a:11:82:bf:
b6:9c:b3:59:7b:2b:00:2d:2d:40:fe:1a:3b:7f:33:3a:e9:a9:
7a:57:23:48:ee:02:ae:e1:91:da:fd:d6:c9:b7:16:e7:8b:ae:
1a:a1:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:00:20 2026 by rpki-client